Hussain
11-23-2004, 03:06 PM
I am facing one problem with cpanel webmail, one person have account of hosting, and he is running ISA server for proxy net sharing in office computers.
He is trying to get access to www.domain.com/webmail , but webmail is not working there, on main server its working, but on proxy client its not working, whats the reason ? site is coming but webmail no.
Thanks
jb605
02-03-2005, 08:01 PM
I am having the same "no webmail / cpanel behind MS ISA server" problem. We have opened up all ports and set ISA to listens on ssl/443.
Does anybody have a clue what might cause this problem?
Thanks.
AlexF
02-03-2005, 10:07 PM
As ISA has strict proxy rules, it usually will not allow you to connect via SSL. Have you tried the non-secured pages?
jb605
02-04-2005, 01:08 AM
we have opened all ports already. And the ISA is set to listen to port 443 (HTTPS). Wouldn't that be enough? Or we need to have ISA listen at port 2096 / 2095?
I have disabled non-secure cpanel and non-secure webmail on the server, and would prefer not to open it up unless that's my only choice.
Thanks for your advice.
Loxias
02-04-2005, 07:41 AM
What version of ISA are you running? I use it as a remote proxy and never have issues with connection. How is he trying to connect?
https://www.domain.com:2096
https://www.domain.com/webmail
Both of those work fine on my machine.
jb605
02-04-2005, 03:40 PM
The ISA in use is MS Internet Security & Acceleration 2000 Server Enterprise Edition.
The way he tries is by type:
https : // www . mydomain . com : 2096 /
and hoping that to give access to webmail. (seems I am not allowed to post url yet:(, so I am spacing them out)
Thanks a lot for your help.
DomineauX
02-04-2005, 04:06 PM
You need to allow listening for SSL on port 2096 as the connection to that port uses SSL and if ISA only allows SSL on port 443, then it will not allow the secured communication on 2096. Same goes for port 2083 for CPanel.
jb605
02-04-2005, 04:20 PM
We did that too. We explicitly allowed SSL on port 2096 and 2083. But we still cannot see the page.
The issue here seems to be related to the certificate. We tried to import the self-signed certificate into ISA, but it wont allow us to do that. Could it be caused by the CPanel/WHM certificate? Do we need to purchase a CPanel/WHM certificate? I am a little bit confused here.
DomineauX
02-04-2005, 05:05 PM
Not sure how picky ISA is about validity of certs
Loxias
02-05-2005, 04:51 PM
Dude, my bad. I had totally forgotten how I set this up (it's been a rough month). Here's what you need to do:
Download this (http://www.isatools.org/isa_tpr.js) (right-click:save as) file and copy it to a cd or floppy and take to your ISA machine.
Put it on the C: and run isa_tpr.js /? to give you the proper syntax.
To add the port it'll go something like this:
isa_trp.js /add Webmail 2096
You can change Webmail to whatever you'd like to name the tunnel.
Restart the Microsoft Web Proxy service and test.
That should get the tunnel working properly for secure webmail to work.
paul888
02-12-2005, 01:09 AM
when I tried to use the following command line to add the port 2096: c:\>cscript isa_trp.js/add port2096. there is one error message came out like the following:
Microsoft (R) Windows Script Host Version 5.6
Copyright (C) Microsoft Corporation 1996-2001. All rights reserved.
Input Error: There is no file extension in "D:\Documents and Settings\paul\Deskt
op\isa_tpr.js\add".
can you give me some hints to fix this problem? thx very much
:(
Loxias
02-12-2005, 10:10 AM
Add some spaces in there...
paul888
02-14-2005, 08:10 PM
It still couldn't work. I already add the port # 2096 in ISA machine. and when I used cscript isa_tpr.js /show. the system could show all the opened ports like 2096. But when I used the workstation to test the webmail. I still couldn't get in. I hope anyone can give me some hints? thx......